v0.5.1

What's New

Security

• Path traversal protection — prevent symlink-based and directory traversal attacks on file read and git endpoints
• CSRF protection — origin validation blocks cross-origin requests to the local server
• Payload validation — request body size limit (1 MB) and shape validation on the feedback endpoint
• File size limit — 10 MB cap on file reads to prevent memory exhaustion
• Error sanitization — generic error messages instead of leaking internal details

Infrastructure

• Plugin namespace update — updated plugin references to new deviantony-plugins namespace